Hi, Please help with below issue. Letsencrypt cert expired, thought that rebuilding the app would renew the cert ,rebuild done. Now I get this error nginx: [emerg] PEM_read_bio_X509_AUX("/shared/ssl/javaqna.com.cer") failed (SSL: error:0906D06C:PEM routines:PEM_read_bio:no start line:Expecting: TRUSTED CERTIFICATE)

I worked with @Umashankar_Ankuri and this looks like a case where the domain’s IPv6 address was configured incorrectly causing the validation check to fail. https://github.com/Neilpang/acme.sh/issues/867 @Umashankar_Ankuri can confirm the problem once he fixes his DNS settings.

Have you tried to remove the old one (ssl folder) and than rebuild it?

Hi Markus, Thanks for the reply. i have executed below from the thread rm -rf /var/discourse/shared/standalone/ssl rm -rf /var/discourse/shared/standalone/letsencrypt ./launcher rebuild app [image] Set up HTTPS support with Let's Encrypt Self-Hosting bookmark This is a guide for enabling HTTPS on an existing Discourse installation using Let’s Encrypt. It assumes prior installation without HTTPS enabled. person_raising_hand Required user level: System Administrator exclamation This guide is only for existing installs where HTTPS is not enabled. Following the official setup guide automatically enables HTTPS by default. So you’d like to add https to your Discourse absolutely free, courtesy of our friends at Let’s Encrypt? bell I… not sure what i’m missing :frowning:

I get the message [emerg] PEM_read_bio_X509_AUX("/shared/ssl/javaqna.com.cer") failed (SSL: error:0906D06C:PEM routines:PEM_read_bio:no start line:Expecting: TRUSTED CERTIFICATE) also mentioned in the first thread itself. Thank you.

Hi, Any one help with this issue. not able to understand what is the error with letsencrypt. tried rebuilding by removing ssl folder cert files serveral times as mentioned above, but no luck. Thanks.

HI Guo Xiang Tan, I have fixed problem with IPV6, just removed those records from DNS. and discourse is now up!! we can mark this as fixed. Just wondering how it worked for the first time!! Thank you.

[image] Umashankar_Ankuri: Just wondering how it worked for the first time!! As per the LE forum topic I linked to earlier, LE recently changed their behaviour from preferring IPv4 to preferring IPv6 records first.

Not able to access site after letsencrypt cert expiry and rebuild due to IPV6

Product Support

mpalmer (Matt Palmer) July 13, 2017, 10:09pm 9

Aaah, yes, that been causing some heartburn over on the LE forums.

Topic		Replies	Views
Problem with my SSL certificate Self-hosting	15	11791	February 21, 2019
Installation produced broken, zero byte certificate Self-hosting letsencrypt	8	2332	May 11, 2019
Error after moving from HTTP to HTTPS Self-hosting letsencrypt	1	1465	August 28, 2017
Let's encrypt auto renewal and ipv6 Product Support	5	1135	July 1, 2020
Let's Encrypt renewal errors Self-hosting	9	2007	February 22, 2020

Not able to access site after letsencrypt cert expiry and rebuild due to IPV6

Related topics